/** * Copyright 2023 actions-toolkit authors * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ import fs from 'fs'; import path from 'path'; import * as core from '@actions/core'; import {parse} from 'csv-parse/sync'; import {Context} from '../context'; export class Inputs { private readonly context: Context; constructor(context: Context) { this.context = context; } public getBuildImageIDFilePath(): string { return path.join(this.context.tmpDir(), 'iidfile').split(path.sep).join(path.posix.sep); } public getBuildMetadataFilePath(): string { return path.join(this.context.tmpDir(), 'metadata-file').split(path.sep).join(path.posix.sep); } public getBuildImageID(): string | undefined { const iidFile = this.getBuildImageIDFilePath(); if (!fs.existsSync(iidFile)) { return undefined; } return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim(); } public getBuildMetadata(): string | undefined { const metadataFile = this.getBuildMetadataFilePath(); if (!fs.existsSync(metadataFile)) { return undefined; } const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim(); if (content === 'null') { return undefined; } return content; } public getDigest(): string | undefined { const metadata = this.getBuildMetadata(); if (metadata === undefined) { return undefined; } const metadataJSON = JSON.parse(metadata); if (metadataJSON['containerimage.digest']) { return metadataJSON['containerimage.digest']; } return undefined; } public generateBuildSecretString(kvp: string): string { return this.generateBuildSecret(kvp, false); } public generateBuildSecretFile(kvp: string): string { return this.generateBuildSecret(kvp, true); } public generateBuildSecret(kvp: string, file: boolean): string { const delimiterIndex = kvp.indexOf('='); const key = kvp.substring(0, delimiterIndex); let value = kvp.substring(delimiterIndex + 1); if (key.length == 0 || value.length == 0) { throw new Error(`${kvp} is not a valid secret`); } if (file) { if (!fs.existsSync(value)) { throw new Error(`secret file ${value} not found`); } value = fs.readFileSync(value, {encoding: 'utf-8'}); } const secretFile = this.context.tmpName({tmpdir: this.context.tmpDir()}); fs.writeFileSync(secretFile, value); return `id=${key},src=${secretFile}`; } public getProvenanceInput(name: string): string { const input = core.getInput(name); if (!input) { // if input is not set returns empty string return input; } const builderID = this.context.provenanceBuilderID; try { return core.getBooleanInput(name) ? `builder-id=${builderID}` : 'false'; } catch (err) { // not a valid boolean, so we assume it's a string return this.getProvenanceAttrs(input); } } public getProvenanceAttrs(input: string): string { if (!input) { return `builder-id=${this.context.provenanceBuilderID}`; } // parse attributes from input const fields = parse(input, { relaxColumnCount: true, skipEmptyLines: true })[0]; // check if builder-id attribute exists in the input for (const field of fields) { const parts = field .toString() .split(/(?<=^[^=]+?)=/) .map(item => item.trim()); if (parts[0] == 'builder-id') { return input; } } // if not add builder-id attribute return `${input},builder-id=${this.context.provenanceBuilderID}`; } public static hasLocalExporter(exporters: string[]): boolean { return Inputs.hasExporterType('local', exporters); } public static hasTarExporter(exporters: string[]): boolean { return Inputs.hasExporterType('tar', exporters); } public static hasDockerExporter(exporters: string[], load?: boolean): boolean { return load ?? Inputs.hasExporterType('docker', exporters); } public static hasExporterType(name: string, exporters: string[]): boolean { const records = parse(exporters.join(`\n`), { delimiter: ',', trim: true, columns: false, relaxColumnCount: true }); for (const record of records) { if (record.length == 1 && !record[0].startsWith('type=')) { // Local if no type is defined // https://github.com/docker/buildx/blob/d2bf42f8b4784d83fde17acb3ed84703ddc2156b/build/output.go#L29-L43 return name == 'local'; } for (const [key, value] of record.map(chunk => chunk.split('=').map(item => item.trim()))) { if (key == 'type' && value == name) { return true; } } } return false; } public static hasGitAuthTokenSecret(secrets: string[]): boolean { for (const secret of secrets) { if (secret.startsWith('GIT_AUTH_TOKEN=')) { return true; } } return false; } }